Overview

overview

10

Static

static

3

df8227c17e...e0.exe

windows7-x64

1

df8227c17e...e0.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    21-10-2024 01:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    df8227c17eee7cc65a3ff5244c073d4e072ee864100b2a293c0ef54e9b5b3ee0.exe

  • Size

    870KB

  • MD5

    bea28a1e680f8b8053e64c8810dad71e

  • SHA1

    8464a9aeaa3a290c9a027484a5b6e1759e9eb0e8

  • SHA256

    df8227c17eee7cc65a3ff5244c073d4e072ee864100b2a293c0ef54e9b5b3ee0

  • SHA512

    b22641529e6e642f852bc43534d49c7bc47668a432edcd3f67f4a879c77aa0e92e1ce259fb41773ba15f0a70396fe031b1073320bc95812fd3fdd2a231caa669

  • SSDEEP

    12288:47wITbhKx7WQeu3D9FPJXOmQ+qO39WoCuwTvk83uRCS26qH3OqtwIulkyF3SkH:4EITMvRFhRRbNWoCfkYSEH3OqtwIuX

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 50 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\df8227c17eee7cc65a3ff5244c073d4e072ee864100b2a293c0ef54e9b5b3ee0.exe
    "C:\Users\Admin\AppData\Local\Temp\df8227c17eee7cc65a3ff5244c073d4e072ee864100b2a293c0ef54e9b5b3ee0.exe"
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:576

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/576-0-0x000007FEF6423000-0x000007FEF6424000-memory.dmp

    Filesize

    4KB

    Download

  • memory/576-1-0x000000013F7F0000-0x000000013F8D0000-memory.dmp

    Filesize

    896KB

    Download

  • memory/576-2-0x000007FEF6420000-0x000007FEF6E0C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/576-3-0x000000001C440000-0x000000001C654000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/576-4-0x000007FEF6420000-0x000007FEF6E0C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/576-5-0x000007FEF6423000-0x000007FEF6424000-memory.dmp

    Filesize

    4KB

    Download

  • memory/576-6-0x000007FEF6420000-0x000007FEF6E0C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/576-7-0x000007FEF6420000-0x000007FEF6E0C000-memory.dmp

    Filesize

    9.9MB

    Download